that will be fine, as long as your site_replication_factor/site_search_factor allow for it. (if you have something like origin:1, total:6, we'll try to put 1 copy in each site, which then no longer meets RF/SF since theres no peers on Alpha/Bravo. So, origin:1, total:4 would be okay, as would origin:2,total:3)
make sure to call ./splunk set indexing-ready on the Cluster Master everytime it restarts, otherwise it'll be waiting for peers from Alpha/Bravo to join before it starts scheduling cluster activities.
... View more